Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qbK-9RQWdGS_xJXOliPpGoY-V4w.roa
File: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (raw, json)
Hash identifier: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=
Subject key identifier: A9:B2:BE:F5:14:16:74:64:BF:C4:95:CE:96:23:E9:1A:86:3E:57:8C
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019F1F1D2DA7679DF511A02F431139C90337
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qbK-9RQWdGS_xJXOliPpGoY-V4w.roa
Signing time: Wed 01 Jul 2026 19:17:13 +0000
ROA not before: Wed 01 Jul 2026 19:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209227
IP address blocks: 185.252.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:1d:2d:a7:67:9d:f5:11:a0:2f:43:11:39:c9:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jul 1 19:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9b2bef514167464bfc495ce9623e91a863e578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:81:74:b5:35:ef:71:86:81:3a:89:1a:eb:
e7:01:a3:47:a3:ed:df:ed:59:3c:e0:5a:41:f1:a7:
0b:9b:7d:99:26:c7:48:34:24:8b:c7:1d:a2:f4:65:
41:d8:8e:c9:99:83:4e:26:b8:3e:2c:81:56:81:b5:
64:e8:10:c1:1f:3c:0b:9a:23:89:f0:1b:a7:2e:db:
d7:b0:b7:e6:4b:38:17:b2:57:d1:df:52:a8:80:b9:
80:c4:1e:2a:26:58:5b:34:a5:0c:f0:47:89:85:1f:
d8:9c:63:10:53:7d:12:1c:56:67:f1:9c:72:97:44:
32:cb:4e:72:b2:1a:da:8c:4f:f2:bb:4e:c0:3f:bc:
17:1d:65:64:2b:d5:05:b9:e8:66:1c:48:95:0a:fc:
04:ce:46:8c:f5:a3:95:64:3d:50:9a:d8:0d:f3:91:
f9:bb:de:5d:9a:25:e0:4f:61:7e:27:be:f5:36:0d:
16:dd:52:5b:26:fe:98:2a:26:f0:91:8a:6f:85:8c:
41:96:c9:8e:37:0a:49:69:b0:cb:bd:97:fa:6e:14:
c2:ca:74:c8:64:9c:2e:6a:d8:32:bf:ac:53:28:0d:
76:d5:80:73:44:92:ad:06:b1:65:5e:d2:c9:8e:6a:
8d:f7:c9:99:af:6c:f3:ff:a7:10:bf:04:61:9a:29:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:BE:F5:14:16:74:64:BF:C4:95:CE:96:23:E9:1A:86:3E:57:8C
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qbK-9RQWdGS_xJXOliPpGoY-V4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.84.0/24
Signature Algorithm: sha256WithRSAEncryption
34:88:7a:a2:03:88:47:31:81:af:c0:19:86:6f:a8:6a:63:27:
8e:b5:3c:f6:b8:22:c9:d8:09:6f:9d:28:7c:fc:20:dd:a0:4b:
7a:0d:f1:04:6d:29:4e:2c:36:26:55:44:20:3a:06:f6:9e:c2:
ae:86:01:02:9c:02:4c:ef:d6:86:a2:61:af:21:fa:0a:02:39:
a8:bc:1f:7c:73:7e:26:c1:0e:58:6a:e7:dc:2d:92:a0:8d:f6:
1e:6f:30:44:43:b5:35:9e:de:28:e4:b8:7c:09:a8:72:6c:45:
0b:7c:f4:84:48:6b:05:79:fe:ef:09:e5:ef:48:5b:a1:1a:da:
f3:97:53:b4:c8:cb:47:70:3b:5a:67:e5:3d:91:ac:b2:ce:97:
9f:1c:cc:55:05:f5:20:59:6c:e7:ad:d6:d5:09:35:52:f4:f8:
12:91:cd:96:06:91:38:1c:cf:5c:cb:3b:9b:cc:af:26:eb:94:
8b:04:15:42:1e:87:2b:2e:03:5a:c3:9e:d7:8a:6b:af:82:5d:
de:8c:b1:87:25:31:71:e4:13:f8:41:73:2e:68:0f:74:8b:85:
d6:7f:b8:8c:60:ac:ed:3a:71:67:ce:f0:62:35:fa:7c:58:16:
b2:88:90:3c:be:47:8b:f6:27:1c:e7:3a:98:24:d3:fb:05:8f:
a8:b9:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:19 2026 by rpki-client